Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: wWC8UFOmq/01+5IBfcmjgkN7dHRaxJfpcq/JrcGUvWE=
Subject key identifier: C5:5F:51:6C:BA:0B:EF:B3:09:FF:2B:EB:CA:66:89:D8:9D:3D:C8:93
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 01A17DAA75026FE63F5EE929EFB81DF5D43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 14:01:25 +0000
Manifest this update: Tue 27 Oct 2026 14:01:25 +0000
Manifest next update: Wed 28 Oct 2026 14:01:25 +0000
Files and hashes: 1: _Hgo7jcPjmaSfusUTNwDyQGV918.roa (hash: HrRfQ3y2o/21ByPzpK6PlTJikaZMMOxAwoJ1HV+ZCfE=)
2: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: 9CUwJWVYsmkG+UIEjePTgDgxb0tojRfoL8olN0V1fng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:75:02:6f:e6:3f:5e:e9:29:ef:b8:1d:f5:d4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Oct 27 14:01:25 2026 GMT
Not After : Oct 28 14:01:25 2026 GMT
Subject: CN=c55f516cba0befb309ff2bebca6689d89d3dc893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:9e:5f:c0:37:10:4d:5d:b0:0d:96:91:02:
82:7b:b5:4a:22:e4:9e:ee:5f:74:e9:66:53:c4:78:
cf:60:e1:7c:2a:fc:63:1a:df:f1:35:36:91:62:a1:
88:53:5c:a2:30:ee:b1:75:58:e3:20:e6:87:2a:d8:
b6:e5:54:3c:f8:3f:cf:bd:c4:cc:4c:53:20:0e:98:
37:04:3e:be:70:bc:2d:bc:43:ff:08:4f:a5:8a:46:
84:68:47:7c:c6:02:b0:66:69:4c:c0:69:db:14:fe:
07:f2:48:74:cb:5d:e2:09:ee:df:ae:9e:28:de:0e:
c7:a2:cf:1d:75:4f:33:c3:59:0e:ee:50:3d:74:bc:
9b:98:c4:d7:e4:72:e8:fc:49:09:7e:8e:d3:85:76:
84:a9:7f:50:fe:39:45:37:0d:7c:0e:59:14:3b:5a:
80:70:ec:d0:8a:15:b2:32:19:c4:9d:65:e2:98:aa:
ef:92:1f:80:0f:99:c7:25:ce:ca:b8:66:bf:10:c5:
af:3c:f8:74:13:d2:50:c1:f4:b3:81:10:e8:66:b7:
9a:d4:5c:b7:66:8b:78:27:06:2f:be:62:d3:12:62:
e9:7f:7d:77:05:68:f6:b5:bf:d3:4d:57:f3:3d:b8:
ce:e3:83:2f:d7:52:51:72:81:46:b2:46:06:4c:dd:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5F:51:6C:BA:0B:EF:B3:09:FF:2B:EB:CA:66:89:D8:9D:3D:C8:93
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:59:fb:7b:67:0b:ba:e6:3d:f3:62:47:9d:90:89:55:97:a0:
b9:ee:95:6f:17:5d:dc:98:53:ba:73:b5:ba:f4:39:0e:61:19:
3c:b9:58:c9:be:15:5a:ea:62:df:cd:ec:22:ee:9b:4a:ed:ac:
a7:40:72:8b:d3:10:08:41:c9:75:bd:e5:8c:c0:4d:e8:81:9d:
32:0c:8b:e2:f3:7a:fa:57:7d:59:9b:aa:e9:d9:41:02:2f:c4:
fd:d9:87:34:4a:91:f1:16:d5:36:56:14:dc:fd:4b:bc:37:5f:
44:14:73:6b:00:cb:1a:c5:00:df:e9:0e:94:a6:b4:43:10:fe:
bd:06:53:3d:fb:69:73:42:97:97:ba:f2:5a:78:14:e4:f6:37:
94:c3:e6:2f:82:2c:55:15:c7:c0:84:3e:1b:40:e2:ee:bc:4d:
e4:c9:7d:33:d4:3f:04:7b:2e:5e:cc:da:b7:14:ad:6d:28:37:
0e:b1:23:7c:4a:71:1d:8a:1f:4b:99:bb:fd:26:04:db:8e:b4:
2c:1b:f3:5e:5f:e3:99:23:28:b4:d6:ab:08:2b:26:01:48:6f:
f0:5a:1b:66:dc:2b:88:b8:01:10:79:b2:d7:55:0e:a8:b1:d2:
fa:f4:b2:bc:ad:cf:29:e3:af:a8:45:fb:81:8d:6e:23:e7:f2:
e4:2f:dc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:41:26 2026 by rpki-client